VULNERABILITY INTELLIGENCE

CVE-2022-29499

CVSS score9.8 CRITICAL
EPSS probability55.24%
CISA KEVKnown exploited vulnerability
Published2022-04-26
Last modified2026-08-06
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Mitel MiVoice Connect Data Validation Vulnerability

Vendor / product: Mitel / MiVoice Connect

Description

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references